accenture2 articles
FBI Boots Accenture Contractor Over Unpatched System That Handed ShinyHunters Thousands of Agent Records
The FBI has removed an Accenture contractor following a data breach by the hacking group ShinyHunters, which exploited an unpatched vulnerability in an Oracle PeopleSoft platform to steal personal details of thousands of FBI employees. The contractor failed to apply a security patch that had been explicitly issued to secure the platform. Two ShinyHunters members have already been arrested, and the FBI has warned that further arrests are likely as its investigation continues.
Accenture Breached: Hacker Claims 35GB Haul Including Source Code and Azure Keys
Accenture has confirmed a data breach after a hacker claimed on PwnForums to have stolen 35 gigabytes of data, including source code, Azure access keys, RSA/SSH keys, and configuration files from the company. Accenture stated the incident has been remediated and that there is no impact on its operations, though it provided few further details. Security experts warn the stolen data could be leveraged for future attacks, given Accenture's close proximity to major enterprise clients' systems and infrastructure.